Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 32 of 166

  • 9.8 /10 Critical
    CVE-2026-91236 No auth

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by an easily exploitable vulnerability in the Fabric Layer, letting unauthenticated attackers with HTTP network access fully compromise the system, exploit requires network access via HTTP.

  • 9.8 /10 Critical
    CVE-2026-91235 No auth

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution vulnerability caused by an easily exploitable flaw in the Fabric Layer, letting unauthenticated attackers with HTTP network access fully compromise the system.

  • 9.8 /10 Critical
    CVE-2026-91234 No auth

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by an easily exploitable vulnerability in the Fabric Layer, letting unauthenticated attackers with HTTP network access fully compromise the system, exploit requires network access via HTTP.

  • 9.8 /10 Critical
    CVE-2026-91233 No auth

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via SOAP in Enterprise Scheduling System, letting attackers fully compromise the system, exploit requires network access.

  • 9.9 /10 Critical
    CVE-2026-91232 Auth required

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by an easily exploitable vulnerability in the Fabric Layer, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 10.0 /10 Critical
    CVE-2026-91231 No auth

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by an easily exploitable vulnerability in Adapters, letting unauthenticated attackers with network HTTP access fully compromise the system, exploit requires network access via HTTP.

  • 9.3 /10 Critical
    CVE-2026-91230 No auth

    Oracle SOA Suite - Broken Access Control

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain an unauthorized access vulnerability caused by a flaw in the Fabric Layer, letting unauthenticated attackers with HTTP network access compromise critical data and modify some data, exploit requires network access via HTTP.

  • 9.1 /10 Critical
    CVE-2026-91225 No auth

    Oracle SOA Suite - Broken Access Control

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain an unauthorized data modification and denial of service vulnerability in Adapters, letting unauthenticated network attackers modify critical data or cause service crashes via HTTP.

  • 9.9 /10 Critical
    CVE-2026-91224 Auth required

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution vulnerability caused by an easily exploitable flaw in the Fabric Layer, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 9.9 /10 Critical
    CVE-2026-91222 Auth required

    Oracle Business Process Management Suite - Remote Code Execution

    Oracle Business Process Management Suite 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by exploitable vulnerability in Human Workflow component via SOAP, letting low privileged attackers take over the system, exploit requires network access.

  • 10.0 /10 Critical
    CVE-2026-91221 No auth

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via T3 and IIOP protocols, letting unauthenticated attackers fully compromise the system, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-91220 No auth

    Oracle Business Process Management Suite - Remote Code Execution

    Oracle Business Process Management Suite 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by unauthenticated network access via HTTP in Human Workflow component, letting unauthenticated attackers fully compromise the system, exploit requires network access.

  • 9.6 /10 Critical
    CVE-2026-91218 Auth required

    Oracle SOA Suite - Broken Access Control

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain an unauthorized data access and modification vulnerability in the Fabric Layer, letting low privileged attackers with network HTTP access create, delete, or modify critical data, exploit requires low privileged network access.

  • 10.0 /10 Critical
    CVE-2026-91216 No auth

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via T3 and IIOP protocols, letting unauthenticated attackers fully compromise the system, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-91214 No auth

    Oracle SOA Suite - Remote Code Execution

    Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution vulnerability caused by an easily exploitable flaw in the Fabric Layer, letting unauthenticated attackers with HTTP network access fully compromise the system.